19.5. LDAP group sync examples

• How the group and users are added to the LDAP server.
• What the resulting group record in OpenShift Container Platform will be after synchronization.

Prerequisites

• Create the configuration file.
• You have access to the cluster as a user with the cluster-admin role.

Procedure

• Run the sync with the rfc2307_config.yaml file:

  $ oc adm groups sync --sync-config=rfc2307_config.yaml --confirm

  OpenShift Container Platform creates the following group record as a result of the above sync operation:

  OpenShift Container Platform group created by using the rfc2307_config.yaml file

  apiVersion: user.openshift.io/v1
  kind: Group
  metadata:
    annotations:
      openshift.io/ldap.sync-time: 2015-10-13T10:08:38-0400 

  1

  
      openshift.io/ldap.uid: cn=admins,ou=groups,dc=example,dc=com 

  2

  
      openshift.io/ldap.url: LDAP_SERVER_IP:389 

  3

  
    creationTimestamp:
    name: admins 

  4

  
  users: 

  5

  
  - jane.smith@example.com
  - jim.adams@example.com

  1

  The last time this OpenShift Container Platform group was synchronized with the LDAP server, in ISO 6801 format.

  2

  The unique identifier for the group on the LDAP server.

  3

  The IP address and host of the LDAP server where this group’s record is stored.

  4

  The name of the group as specified by the sync file.

  5

  The users that are members of the group, named as specified by the sync file.